Messages in this thread | | | From | Jethro Beekman <> | Subject | Re: [PATCH v20 00/28] Intel SGX1 support | Date | Fri, 19 Apr 2019 19:38:19 +0000 |
| |
On 2019-04-19 08:27, Andy Lutomirski wrote: > There are many, > many Linux systems that enforce a policy that *all* executable text > needs to come from a verified source. On these systems, you can't > mmap some writable memory, write to it, and then change it to > executable.
How is this implemented on those systems? AFAIK there's no kernel config option that changes the semantics of mmap as you describe.
-- Jethro Beekman | Fortanix
| |